ACFE CFE - Investigation Exam (page: 1)
ACFE Certified Fraud Examiner - Investigation
Updated on: 11-Nov-2025

Which of the following is NOT true with regard to tracing the disposition of loan proceeds?

  1. Tracing loan proceeds can reveal previous civil offenses committed by the subject
  2. Tracing loan proceeds can determine if the proceeds were deposited into hidden accounts
  3. Tracing loan proceeds can uncover previously unknown witnesses
  4. Tracing loan proceeds can determine if hidden accounts were used for loan payments.

Answer(s): A



If you are seizing a computer for forensic analysis, why is it generally necessary to seize any copiers connected to it?

  1. Many copiers connect via parallel cables, which store and transmit copy job data.
  2. Most copiers store, process, and transmit data m a cloud environment
  3. Many copiers have internal hard drives that might contain information relevant to a fraud examination
  4. Most copiers today are nonimpact copiers, meaning that they store copied images indefinitely.

Answer(s): C



Which of the following can be obtained from a wire transfer record?

  1. The name of the receiving institution's registered agent
  2. The recipient's government identification number
  3. The name of the sender or originator
  4. The sending institution's accreditation type

Answer(s): C



When planning for the interview phase of an investigation, which of the following steps should NOT be taken by the fraud examiner?

  1. Consider what the interview is intended to accomplish and state an objective.
  2. Review the case file to ensure that important information has not been overlooked
  3. Prepare a detailed list of questions to ask the subject during the interview.
  4. Ensure that the interview is held in a venue where the subject will feel Uncomfortable

Answer(s): D



Jackson, a digital forensic examiner for a government agency, is conducting a criminal investigation into the alleged embezzlement of funds from the government's Welfare Department (WD). Ginny. a WD employee, is the prime suspect. Jackson obtains a court order authorizing him to seize Ginny's personal computer for forensic examination.
Which of the following is the MOST ACCURATE statement?

  1. If Ginny's computer is running. Jackson should perform a graceful shutdown by turning it off using the normal shutdown process
  2. If Ginny's computer is off and Jackson needs evidence that exists only in the form of volatile data, he should turn the computer on and retrieve data directly via the computer's normal interface.
  3. If Ginny's computer is off. Jackson should not turn it on unless he plans to use an encryption device that can guarantee that the system's hard drive will not be accessed during startup.
  4. If Ginny's computer is running. Jackson may retrieve data from the computer directly via its normal interface if the evidence that he needs exists only in the form of volatile data

Answer(s): D



Viewing Page 1 of 35



Share your comments for ACFE CFE - Investigation exam with other users:

Bhavya 9/13/2023 10:15:00 AM

very usefull
Anonymous


Rahul Kumar 8/31/2023 12:30:00 PM

need certification.
CANADA


Diran Ole 9/17/2023 5:15:00 PM

great exam prep
CANADA


Venkata Subbarao Bandaru 6/24/2023 8:45:00 AM

i require dump
Anonymous


D 7/15/2023 1:38:00 AM

good morning, could you please upload this exam again,
Anonymous


Ann 9/15/2023 5:39:00 PM

hi can you please upload the dumps for sap contingent module. thanks
AUSTRALIA


Sridhar 1/16/2024 9:19:00 PM

good questions
Anonymous


Summer 10/4/2023 9:57:00 PM

looking forward to the real exam
Anonymous


vv 12/2/2023 2:45:00 PM

good ones for exam preparation
UNITED STATES


Danny Zas 9/15/2023 4:45:00 AM

this is a good experience
UNITED STATES


SM 1211 10/12/2023 10:06:00 PM

hi everyone
UNITED STATES


A 10/2/2023 6:08:00 PM

waiting for the dump. please upload.
UNITED STATES


Anonymous 7/16/2023 11:05:00 AM

upload cks exam questions
Anonymous


Johan 12/13/2023 8:16:00 AM

awesome training material
NETHERLANDS


PC 7/28/2023 3:49:00 PM

where is dump
Anonymous


YoloStar Yoloing 10/22/2023 9:58:00 PM

q. 289 - the correct answer should be b not d, since the question asks for the most secure way to provide access to a s3 bucket (a single one), and by principle of the least privilege you should not be giving access to all buckets.
Anonymous


Zelalem Nega 5/14/2023 12:45:00 PM

please i need if possible h12-831,
UNITED KINGDOM


unknown-R 11/23/2023 7:36:00 AM

good collection of questions and solution for pl500 certification
UNITED STATES


Swaminathan 5/11/2023 9:59:00 AM

i would like to appear the exam.
Anonymous


Veenu 10/24/2023 6:26:00 AM

i am very happy as i cleared my comptia a+ 220-1101 exam. i studied from as it has all exam dumps and mock tests available. i got 91% on the test.
Anonymous


Karan 5/17/2023 4:26:00 AM

need this dump
Anonymous


Ramesh Kutumbaka 12/30/2023 11:17:00 PM

its really good to eventuate knowledge before appearing for the actual exam.
Anonymous


anonymous 7/20/2023 10:31:00 PM

this is great
CANADA


Xenofon 6/26/2023 9:35:00 AM

please i want the questions to pass the exam
UNITED STATES


Diego 1/21/2024 8:21:00 PM

i need to pass exam
Anonymous


Vichhai 12/25/2023 3:25:00 AM

great, i appreciate it.
AUSTRALIA


P Simon 8/25/2023 2:39:00 AM

please could you upload (isc)2 certified in cybersecurity (cc) exam questions
SOUTH AFRICA


Karim 10/8/2023 8:34:00 PM

good questions, wrong answers
Anonymous


Itumeleng 1/6/2024 12:53:00 PM

im preparing for exams
Anonymous


MS 1/19/2024 2:56:00 PM

question no: 42 isnt azure vm an iaas solution? so, shouldnt the answer be "no"?
Anonymous


keylly 11/28/2023 10:10:00 AM

im study azure
Anonymous


dorcas 9/22/2023 8:08:00 AM

i need this now
Anonymous


treyf 11/9/2023 5:13:00 AM

i took the aws saa-c03 test and scored 935/1000. it has all the exam dumps and important info.
UNITED STATES


anonymous 1/11/2024 4:50:00 AM

good questions
Anonymous